ELSA-2018-4025

ELSA-2018-4025 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2018-02-07

Description

[4.1.12-112.14.14]
- drivers/char/mem.c: deny access in open operation when securelevel is set (Ethan Zhao) [Orabug: 27234850] [Orabug: 27234850]
- hugetlb: fix nr_pmds accounting with shared page tables (Kirill A. Shutemov) [Orabug: 26988581]
- x86/IBRS: Drop unnecessary WRITE_ONCE (Boris Ostrovsky) [Orabug: 27416198]
- x86/IBRS: Dont try to change IBRS mode if IBRS is not available (Boris Ostrovsky) [Orabug: 27416198]
- x86/IBRS: Remove support for IBRS_ENABLED_USER mode (Boris Ostrovsky) [Orabug: 27416198]
- x86: Include linux/device.h in bugs_64.c (Boris Ostrovsky) [Orabug: 27418896]
- x86/spectre: Drop the warning about ibrs being obsolete. (Konrad Rzeszutek Wilk)
- x86/spec: Dont print the Missing arguments for option spectre_v2. (Konrad Rzeszutek Wilk)
- x86/spec: Also print IBRS if IBPB is disabled. (Konrad Rzeszutek Wilk)
- x86/IBPB: Provide debugfs interface for changing IBPB mode (Boris Ostrovsky) [Orabug: 27449065]
- xen: Make PV Dom0 Linux kernel NUMA aware (Elena Ufimtseva)
- net/rds: Fix incorrect error handling (Hakon Bugge) [Orabug: 26848729]
- net/rds: use multiple sge than buddy allocation in congestion code (Wei Lin Guay) [Orabug: 26848729]
- Revert RDS: fix the sg allocation based on actual message size (Wei Lin Guay) [Orabug: 26848729]
- Revert RDS: avoid large pages for sg allocation for TCP transport (Wei Lin Guay) [Orabug: 26848729]
- Revert net/rds: Reduce memory footprint in rds_sendmsg (Wei Lin Guay) [Orabug: 26848729]
- net/rds: reduce memory footprint during ib_post_recv in IB transport (Wei Lin Guay) [Orabug: 26848729]
- net/rds: reduce memory footprint during rds_sendmsg with IB transport (Wei Lin Guay) [Orabug: 26848729]
- net/rds: set the rds_ib_init_frag based on supported sge (Wei Lin Guay) [Orabug: 26848729]
- bnxt_en: Fix possible corrupted NVRAM parameters from firmware response. (Michael Chan) [Orabug: 27199588]
- x86, kasan: Fix build failure on KASAN=y && KMEMCHECK=y kernels (Andrey Ryabinin) [Orabug: 27255122]
- x86, efi, kasan: Fix build failure on !KASAN && KMEMCHECK=y kernels (Andrey Ryabinin) [Orabug: 27255122]
- x86, efi, kasan: #undef memset/memcpy/memmove per arch (Andrey Ryabinin) [Orabug: 27255122]
- Revert Makefile: Build with -Werror=date-time if the compiler supports it (Gayatri Vasudevan) [Orabug: 27255122]
- dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam) [Orabug: 27290300] {CVE-2017-8824}
- x86/efi: Initialize and display UEFI secure boot state a bit later during init (Daniel Kiper) [Orabug: 27309477]
- x86/espfix: Init espfix on the boot CPU side (Zhu Guihua) [Orabug: 27344552]
- x86/espfix: Add cpu parameter to init_espfix_ap() (Zhu Guihua) [Orabug: 27344552]
- ALSA: pcm: prevent UAF in snd_pcm_info (Robb Glasser) [Orabug: 27344841] {CVE-2017-0861} {CVE-2017-0861}
- fs/ocfs2: remove page cache for converted direct write (Wengang Wang)
- Revert ocfs2: code clean up for direct io (Wengang Wang)
- assoc_array: Fix a buggy node-splitting case (David Howells) [Orabug: 27364592] {CVE-2017-12193} {CVE-2017-12193}
- Sanitize move_pages() permission checks (Linus Torvalds) [Orabug: 27364690] {CVE-2017-14140}
- pti: compile fix for when PTI is disabled (Pavel Tatashin) [Orabug: 27383147] {CVE-2017-5754}
- sctp: do not peel off an assoc from one netns to another one (Xin Long) [Orabug: 27386999] {CVE-2017-15115}
- net: ipv4: fix for a race condition in raw_sendmsg (Mohamed Ghannam) [Orabug: 27390682] {CVE-2017-17712}
- mlx4: add mstflint secure boot access kernel support (Qing Huang) [Orabug: 27404202]
- x86: Move STUFF_RSB in to the idt macro (Konrad Rzeszutek Wilk)
- x86/spec: STUFF_RSB _before_ ENABLE_IBRS (Konrad Rzeszutek Wilk)
- x86: Move ENABLE_IBRS in the interrupt macro. (Konrad Rzeszutek Wilk) [Orabug: 27449045]

Related CVEs

CVE-2017-14140

CVE-2017-5754

CVE-2017-12193

CVE-2017-8824

CVE-2017-17712

CVE-2017-0861

CVE-2017-15115

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (x86_64)	kernel-uek-4.1.12-112.14.14.el6uek.src.rpm	c31d92558b2be893a0f998b52822b194371d66dc3c2c73bc2f0673e67f24720d	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-4.1.12-112.14.14.el6uek.x86_64.rpm	86d1b6991c5be1ff416e34c85e8ee17fd2f41d8930fee6ba37dca256d30911f0	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-debug-4.1.12-112.14.14.el6uek.x86_64.rpm	671a5e7d72d1bf22890ca39ce586c9919be72c7473421fef3b99cda2d5c840ec	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-debug-devel-4.1.12-112.14.14.el6uek.x86_64.rpm	f303a3254268ed4bd75b230b5fb0c727a0a928808fa23247666d0938c7c8e4b0	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-devel-4.1.12-112.14.14.el6uek.x86_64.rpm	fb344c95f57bd54ad28a4e2e53fbc9cae3c27cc1faf0e537b04f1959f5446d23	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-doc-4.1.12-112.14.14.el6uek.noarch.rpm	bc465df4d367a9527ed0987d0c2ec9a40c210e4178030207fd1e3ddf2e0e4c2a	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-firmware-4.1.12-112.14.14.el6uek.noarch.rpm	9037d4dd7b7d3b60c54841e095912108915c99724751d2baf07d68bd6caf4d2c	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
Oracle Linux 7 (x86_64)	kernel-uek-4.1.12-112.14.14.el7uek.src.rpm	f857b38f807c5622a87cc1c4800fca85952816a574061c502c7156d8b56a05eb	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-4.1.12-112.14.14.el7uek.x86_64.rpm	5fa6d0f32b5f02f7e74a3b655414cdab2ed6fa1162405265a185dccef4312105	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-debug-4.1.12-112.14.14.el7uek.x86_64.rpm	4c705c6156ebfadb95e7719cd8bc672c19f423b436fc4bb770e925e04a05c3ce	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-debug-devel-4.1.12-112.14.14.el7uek.x86_64.rpm	3d7c8b7834a3d14fe62d53f20362dc4cc2bceb93f5027fe24db697bd20869d6a	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-devel-4.1.12-112.14.14.el7uek.x86_64.rpm	23b5b0721250b6da204a659c3ee235c4fe4cca4fe7d72145d21055ed64a3f121	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-doc-4.1.12-112.14.14.el7uek.noarch.rpm	6244b9a71802d7ce8be6ca9e39e043e4c3a2002a7d19784aa3469224a8144763	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-firmware-4.1.12-112.14.14.el7uek.noarch.rpm	1dd8f0bb8f9548efee5110836d54683e583778908c138baf1c32cc3d417a334e	ELSA-2025-20007	ol7_x86_64_UEKR4_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team